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11 July 2007 2007-4217 


B. 


CO. 


MEMORANDUM OF UNDERSTANDING 
BETWEEN 
THE NATIONAL RECONNAISSANCE OFFICE, 
CHIEF INFORMATION OFFICER 
AND 
THE DEPARTMENT OF HOMELAND SECURITY, 
OFFICE OF INTELLIGENCE AND ANALYSIS, 
CHIEF INFORMATION OFFICER 
on 


THE USE OF DEPARTMENT OF HOMELAND SECURITY WORKSTATIONS TC 


CONNECT TO THE NATIONAL RECONNAISSANCE OFFICE 
MANAGEMENT INFORMATION SYSTEM 


(USPFOUT) PURPOSE. This Memorandum of Understanding (MOU) 


formally documents the information assurance responsibilities 
hetween the National Reconnaissance Office (NRO) and the 
Tepartment of Homeland Security (DHS) £Eor providing Sensitive 
Compartmented Information (SCT) electronic access to the NRO 
Management Information System (NMIS) for NRO liaison 
personnel stationed at DHS. 


(UAMPOT) REFERENCES. 


1. (U) Director of Central Intelligenca Directive (DCib) 
6/3, Protecting Sensitive Compartmented Information Within 
Information Systems, 5 dune 1999 


2. {(U) DTD 679, Physical Security Standards for Sensitive 
Compartmented Facilities, 18 November 2002 


3.  €U) NRO Instruction 60-1a, Approval Procedures for 
Information Technology Services Provided by the 
Communications Systems Acquisition and Operations 
Directorate, 39 November 2001 


(I4AReuo} BACKGROUND. Connectivity from DHS te NRO provides 


NRO personel assigned and deployed to DHS the capability to 
access the NMIS From an SCT DHS workstation. This capability 
leverages axisting SCI network connectivity with minimal 
additional resource requirements while allowing NRO personnel 
the necessary access to perform their duties. 
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SUBJECT: (U—P686) MOU BETWEEN THE NRO, CIO AND DHS, OFFICE Gi 
INTELLIGENCE AND ANALYSIS, CIO ON THE USE OF NMIS 


dD. (0) RESPONSIBILITIES. 


Ll. (UMAPeHe} NRO will: 


a. {USPEITT Maintain configuration control over NRO 
communications systems and equipment and coordinate 
any changes that may affect external interfaces. 


bh. (U/sBe66) Validate eligibility; track, monitor, 
and rescind user access as required. 





c. (U/sSSrouoT Provide all applicable initial and 
yefresher security and information assurance training 
to NRO persormel . 





ad. (@**BOUG) Brief NRO users of their responsibility 
to comply with NRO and applicable DHS information 
security policy and procedures. 


e. (U/APeeS Report all information technolegy (IT) 
and intormation assurance incidents for all NRO users 
to appropriate entities such as the Intelligence 
Commanity-Tncident Response Center. 


£,  (U/ eee; Provide helpdesk support to NRO users 
accessing NMIS. 


as (U/—eote—$Ensure NRO users meet all of the 
following criteria and forward this information to the 
appropriate DHS security point of contact as required: 


(1) (U/AsRawer Hold United States (U.S.} 
citizenship. 


(2) (U/--hewOL Provide support to the NRO as a 
U.S, Government employee, NRO-sporsored 


contractor, or NRO Federally Funded Research and 
Development Center employee. 


(3) (U—Bese) Hold a current Top Secret clearance 
and be indoctrinated for the appropriate SCI. 


(4) (U/smeH@7 Be subject to or have a counter~ 
intelligence scope security polygraph that has 
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SUBJECT: (U—6BeH67° MOU BETWEEN THE NRO, CIO AND DHS, OFFICE oF 
INTELLIGENCE AND ANALYSIS, CIO ON THE USE OF NMIS 


been favorably adjudicated and is accepted by the 
NRO. 


(5) (ueINevrer Have a neéed-to-know for information 
on NMIS that is validated by an NRO Government 
sponser. 


24. (U Ae} DHS will: 


a. (USBe66) Ensure systems that will access NMIS are 
certified and accredited according to Reference B. 1. 


b. (UPMRS86O) Ensure the NRO user is properly 
indoctrinated for all relevant SCI compartments prior 
to creating a local account. 


cc. (UL6ReHeT Notify the NRO Director of Security and 

Counterintelligence immediately of any reportable TT 

security incidents, user access terminations, and 

security concerns affecting NRO personnel at DHS who 
have access to NMIS. 


d. (UARROS6E} Provide, upon request by NRO Chief 
Information Officer (CIO), andit records of users’ 
local sessions on DHS workstations to include 
username, session initiation date and time, 
workstation Internet Protocol address, and session 
termination date and time. 

e, (UAée86) Provide training to deployed NRO users 
regarding their security responsibilities for using a 
DHS workstation within a DHS sensitive compartment 
information facility. 


E. (U} IMPLEMENTATION. 
1. {U) This MOU will take effect upon signature of 
authorized representatives from the NRO CIO and DHS 
Intelligence and Analysis CIO. 
2. (U) As agreed to by all parties, or designees, this MOU 


Shall be reviewed every two years to determine its 
continued applicability. 
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SUBJECT: {U/4eRRQ) MOU BETWEEN THE NRO, CIO AND DHS, OFFICE OF 
INTELLIGENCE AND ANALYSTS, CIO ON THE USE OF NMIS 


3. {U) Bither party may terminate this MOU by written 
tlotification to the other party 180 days in advance of the 
termination date. This MOU will terminate after such 
written notification. 


Craig Kaucher Dr. Susan Gragg 

Chief Information Officer Chief Information Officer 

Office of Intelligence and Wational Reconnaissance Office 
Analysis 


Department of Homeland Security 
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